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File: USPT 



Jan 4, 



2005 



DOCUMENT-IDENTIFIER: US 6839748 Bl 

TITLE: Synchronous task scheduler for corba gateway 

Application Filing Date (1) : 
20000421 

Detailed Description Text (46) : 

In one embodiment, the Request Gateway 304 may provide the Manager Applications 206 
access to an MIS 308 service that provides security /audit trails of TMN 
management/object transactions. The Request Gateway 304 does this by providing a 
platform-independent way to turn on/off the security /audit trails via, e.g., 
request cmis_get/cmis_set operations on the managed object, as well as providing 
user information in each request sent to the MIS. The security / audit trail service 
provided by the MIS 308 may include a logging function which may be used to track 
event or request related traffic and save information such as which client sent the 
request/event, when the request/event occurred, and the nature of the 
request/event, or any other information useful for security and auditing purposes. 
In one embodiment, the MIS 308 security /audit service provides an "all or nothing" 
capability, in that either all information for all traffic may be logged, or 
nothing is logged. In one embodiment, the Manager Applications 206 may be subject 
to authentication before being allowed access to the security/audit trail service, 
such as by a pluggable authentication module, discussed below with reference to 
FIGS. 12, 13, 14, and 15. 
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File: USPT 



Jun 30, 1998 



DOCUMENT- IDENTIFIER : US 5774525 A 

TITLE: Method and apparatus utilizing dynamic questioning to provide secure access 
control 



Abstract Text (1) : 

A method and corresponding apparatus utilizes questioning to provide secure access 
control including the steps of storing information in a database; generating at 
least one question based upon the information stored in the data base; 
communicating to the user the generated question (s) ; receiving a response 
associated with the question (s) , interpreting the response to determine whether the 
response conforms to the information upon which is based the associated question 
(s); and outputting an authorization status indicating whether or not the user is 
authorized for access according to the determination. The question (s) concerns a 
relationship among portions of information contained in said data base. This 
feature is advantageous because it protects against an eavesdropper gaining access 
to the service or facility and provides the capability of generating a relatively 
large number of different questions from a small data base. Furthermore, the 
questions asked of the user may be based on dynamic data, which advantageously 
protects against eavesdroppers gaining access to the service or facility. In 
addition, the number and/or type of questions generated by the first module may 
correspond to a security level of the system. The security level may be set by the 
service or facility, or may be set the system control module according to user 
input . 

Application Filing Date (1) : 
19970814 
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